secnet 0.4.3

[Ian Jackson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I am pleased to announce secnet 0.4.3.

secnet 0.4.3 is a bugfix and portability release for secnet 0.4.
Ideally, users would upgrade, but it's not urgent.

0.4.3 also contains a couple of helpful changes for use with hippotat,
my not-really-released IP over HTTP utility.

0.4.3 can be found here:
  http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git/secnet.git/
  http://www.chiark.greenend.org.uk/~secnet/release/0.4.3/
(SHA-256 checksums are listed below).

FYI: secnet version numbers 0.4.1 and 0.4.2 were not used.

secnet (0.4.3) unstable; urgency=low

  Security improvement:
  * Use `mpz_powm_sec' for modexps.

  Enhancements:
  * Implement comm-info and dedicated-interface-addr feature, for
    benefit of hippotat.
  * Implement `keepalive' site option, to try to keep link always up.

  Build etc. fixes:
  * #include <limits.h> (fixes the build on jessie).
  * Tolerate building from a git checkout, but with git not installed.
    (This can happen in chroots.)
  * Turn off -Wsign-compare for bison output.
  * Makefile.in: Fix `check-ipaddrset' rule to get reference from
    $(srcdir).  (Makes out-of-tree builds work properly.)
  * Release checklist fixes.
  * Burn version numbers 0.4.1 and 0.4.2 due to errors in release prep.

  Bugfixes:
  * When printing messages about dropping IPv6, do not print anything
    about ihl.  (Check the IP version field first!)
  * When turning on debug, turn on verbose too.

 -- Ian Jackson <ijackson at chiark.greenend.org.uk>  Sat, 25 Nov 2017 13:36:41 +0000

c114bacefeb8f4707600cc4f7dc0fa7d8d4ef3d0d3fef617cd2503af400bbe8a  secnet-0.4.3.tar.gz
561786ff1adbd01c7a78a1bfe8d413bfc8339621f6d78c34245071011eb9ea8b  secnet-0.4.3.tar.gz.sig
54796ac7c2b174560402fcbcada2bb3b968687e538c62ccee680be86e462fe66  secnet_0.4.3_amd64.deb
893df85c91f20535840f488c10a80c187d22151bc048484c981e904335c44664  jessie-backport/secnet_0.4.3_i386.deb
-----BEGIN PGP SIGNATURE-----

iQFUBAEBCAA+FiEEVZrkbC1rbTJl58uh4+M5I0i1DTkFAloZhhkgHGlqYWNrc29u
QGNoaWFyay5ncmVlbmVuZC5vcmcudWsACgkQ4+M5I0i1DTmLyQf/eSfTx5gS6cSu
lpyWc6C+akx7UpCrp5OFjDVRRt9IwYAFF3yfIsh5Bh6mUaa0/BUyYxPejOcJ0OKu
/p9jP7UQdkyyhfrkcGG4jAanSwiNhu30VHI8oZWmXlo5vEDh8xXYlSgV+JKTJLm4
DEzS0RtWL39yEi8TqYU1d1uW3XVMIbkJrkJT4Kv33fLew7jzggHcXA4tNLdKuhNQ
GRqBC088UIrm7CFhz6bTArH5D/mJs1libr1BC53lKBcng9AzzdshAaiSw+b/HCv7
RytrXje47lNFHU+cQWpNPiOzyYbQu74JcKIPLOqYhLyhu1RReja6HtZUvQx4tRwJ
Q+xkRwxqDg==
=tzfR
-----END PGP SIGNATURE-----

-- 
Ian Jackson <ijackson at chiark.greenend.org.uk>   These opinions are my own.

If I emailed you from an address @fyvzl.net or @evade.org.uk, that is
a private address which bypasses my fierce spamfilter.